Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242531 4.3 警告 Infoblox - Infoblox NetMRI の netmri/config/userAdmin/login.tdf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5178 2012-09-21 15:28 2011-10-18 Show GitHub Exploit DB Packet Storm
242532 4.3 警告 eSyndiCat - eSyndiCat Pro の admin/controller.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5177 2012-09-21 15:27 2012-09-20 Show GitHub Exploit DB Packet Storm
242533 5 警告 WizOne Solutions - Drupal 用 Fill PDF モジュールにおける任意の PDF ファイルを書かれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5007 2012-09-21 15:01 2012-01-4 Show GitHub Exploit DB Packet Storm
242534 6.8 警告 Database Publishing Consultants - Drupal 用 Admin:hover モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1631 2012-09-21 15:01 2012-01-11 Show GitHub Exploit DB Packet Storm
242535 2.1 注意 Nestor Mata Cuthbert - Drupal 用 Taxonomy Navigator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1630 2012-09-21 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
242536 2.1 注意 Dmitry Loac - Drupal 用 Taxotouch モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1629 2012-09-21 15:00 2012-01-11 Show GitHub Exploit DB Packet Storm
242537 3.5 注意 63reasons - Drupal 用 SuperCron モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1628 2012-09-21 14:59 2012-01-11 Show GitHub Exploit DB Packet Storm
242538 6 警告 Karen Stevenson - Drupal 用 Date モジュールのイベントの変更フォームにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1626 2012-09-21 14:59 2012-01-11 Show GitHub Exploit DB Packet Storm
242539 6 警告 WizOne Solutions - Drupal 用 Fill PDF モジュールの fillpdf.admin.inc における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1625 2012-09-21 14:58 2012-01-4 Show GitHub Exploit DB Packet Storm
242540 6.8 警告 Erik Webb - Drupal 用 Password Policy モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1633 2012-09-21 14:58 2012-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268671 4.7 MEDIUM
Local 		linux linux_kernel An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious application to access data outside of its permission levels.… CWE-200
Information Exposure 		CVE-2016-6756 2024-11-21 11:56 2017-01-13 Show GitHub Exploit DB Packet Storm
268672 7.0 HIGH
Local 		linux linux_kernel An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Hig… CWE-284
Improper Access Control 		CVE-2016-6755 2024-11-21 11:56 2017-01-13 Show GitHub Exploit DB Packet Storm
268673 7.5 HIGH
Network 		netapp metrocluster_tiebreaker MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext which may be viewed by an unauthenticated user. CWE-200
Information Exposure 		CVE-2016-6820 2024-11-21 11:56 2017-01-12 Show GitHub Exploit DB Packet Storm
268674 6.1 MEDIUM
Network 		mantisbt mantisbt Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-beta1, 1.3.0-beta1 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2016-6837 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
268675 7.5 HIGH
Network 		call-cc chicken The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak. This could be abused by an attacker to cause resource exh… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-6831 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
268676 9.8 CRITICAL
Network 		call-cc chicken The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call. This would allow user-s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-6830 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
268677 7.5 HIGH
Network 		python hpack
hyper 		A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. T… CWE-399
 Resource Management Errors 		CVE-2016-6581 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
268678 7.5 HIGH
Network 		python python_priority_library A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every p… CWE-399
 Resource Management Errors 		CVE-2016-6580 2024-11-21 11:56 2017-01-11 Show GitHub Exploit DB Packet Storm
268679 6.5 MEDIUM
Network 		docker docker The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a long sequence of join and quit actions. NOTE: the vendor dis… CWE-399
 Resource Management Errors 		CVE-2016-6595 2024-11-21 11:56 2017-01-5 Show GitHub Exploit DB Packet Storm
268680 4.3 MEDIUM
Network 		sap hybris Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace. CWE-200
Information Exposure 		CVE-2016-6859 2024-11-21 11:56 2016-12-31 Show GitHub Exploit DB Packet Storm